CiscoWorks Network Compliance Manager

Table Of Contents

Device Driver Reference for CiscoWorks Network Compliance Manager

Obtaining CiscoWorks NCM Driver Details

AAA Configuration

Protocols and Ports

Inline Comment Characters

Viewing the Software Version

Accessing the CiscoWorks NCM Documentation Set

Obtaining Documentation, Obtaining Support, and Security Guidelines

Device Driver Reference for CiscoWorks Network Compliance Manager

---

Revised: April, 2009, OL-17774-02

This document includes important information regarding device drivers supported by CiscoWorks Network Compliance Manager (NCM). It contains the following sections:

•Obtaining CiscoWorks NCM Driver Details

•AAA Configuration

•Protocols and Ports

•Inline Comment Characters

•Viewing the Software Version

•Accessing the CiscoWorks NCM Documentation Set

•Obtaining Documentation, Obtaining Support, and Security Guidelines

---

Note All documentation, including this document and any or all of the parts of the CiscoWorks NCM documentation set, might be upgraded over time. Therefore, we recommend you access the CiscoWorks NCM documentation set using the Cisco.com URL: http://www.cisco.com/en/US/products/ps6923/tsd_products_support_series_home.html

---

The Docs tab visible from within CiscoWorks NCM might not include links to the latest documents.

Obtaining CiscoWorks NCM Driver Details

To obtain information on each of the supported CiscoWorks NCM drivers, do the following:

---

Step 1 Login to the CiscoWorks NCM server using the Admin account.

Step 2 Navigate Admin- > Drivers. The Drivers page opens and displays a list of the drivers installed on your system and the number of drivers currently in use.

Step 3 To view the supported driver features and appropriate access methods required to support those features, navigate Internal Name- > Driver Name on which you want information. Note that any additional release notes for the drivers can also be located in these driver support document links.

---

For CiscoWorks NCM 1.4 users, driver documentation can be found externally at the following location on your server:

•For Windows: <NCM install folder>\docs\en\DSD\index.html

•For Linux and Solaris: <NCM install folder>/docs/en/DSD/index.html

AAA Configuration

To implement AAA change detection, CiscoWorks NCM installs an agent on your AAA server. The agent parses the logs of the AAA application and forwards appropriate logs to CiscoWorks NCM over port 1099. From the AAA logs, CiscoWorks NCM can detect when a user logs in and out of devices, enabling CiscoWorks NCM to report who made a change and when.

The agent causes minimal load on your AAA server. The agent makes only outbound connections. It does not accept incoming connections and does not open any security holes on the server. CiscoWorks NCM supports CiscoSecure ACS directly. For help configuring AAA, or if you use another AAA server, contact Customer Support.

---

Note If your network already uses Radius or TACACS+, you should create a separate user name and password for CiscoWorks NCM. If you do this, put the Radius or TACACS+ user name in the AAA User Name field on the Edit User page.

---

Protocols and Ports

CiscoWorks NCM communicates with network devices using a combination of the protocols listed in the table below. If a firewall is present between the NCM server and the network devices, you must provide NCM access to the devices by opening the ports used by those protocols.

Protocol	Port		Use
	Windows	Solaris and Linux
SSH (TCP)	22	8022	CiscoWorks NCM Server to network devices
telnet (TCP)	23	8023	CiscoWorks NCM Server to network devices
TFTP (UDP)	69	69	Network devices to TC Server
SNMP (UDP)	161	161	CiscoWorks NCM Server to Network devices
SNMP trap (UPD)	162	162	CiscoWorks NCM Server to NMS
syslog (UDP)	514	514	Network devices to TC Server
JNDI	1099	1099	AAA Server to TC Server
RMI	4444	4444	AAA Server to TC Server

Inline Comment Characters

If you use the CiscoWorks NCM user interface, CiscoWorks NCM displays the inline comment characters at the top of the Edit Configuration page. If you use the CLI or write script, use the following table as a reference.

---

Note If the you do not use a double comment character when commenting the configuration in CiscoWorks NCM, either the device or CiscoWorks NCM could overwrite the user's comments.

---

Platform	Characters	Description
3COM	CiscoWorks NCM	SuperStack II
Check Point	##	All deployable configurations
Cisco Aironet	##	340 and 350 series
Cisco Aironet	!!	1100 and 1200 series
Cisco CatOS	##	2948G, 2980, 4000, 5000, and 6000 series (hybrid mode)
Cisco IOS	!!	All deployable configurations
Cisco VPN	##	VPN Concentrator 3000 series
Extreme Summit	##	24 and 48
F5 Networks	##	BIG-IP and 3DNS
Foundry	!!	NetIron series
Marconi	##	Devices running ForeOS
NetScreen	##	5XP
Nortel Routers	##	BayRS series
Nortel Switches	##	BayStack 350, 410, 420, 425, 450, and 470; Passport 8000 series
Nortel VPN	!!	Contivity 100, 2600, 4500, 4600

Viewing the Software Version

The About Network Compliance Manager page provides information about this software version. The page also includes links to other important pages, such as License Information and contacting Customer Support. In addition, you can see the list of device drivers installed on your system.

Accessing the CiscoWorks NCM Documentation Set

You can access the entire CiscoWorks Network Compliance Manager documentation set from the following Cisco.com URL:

http://www.cisco.com/en/US/products/ps6923/tsd_products_support_series_home.html

From here you can navigate to any documentation for CiscoWorks NCM 1.4 you will need.

---

Tip To cut and paste a two-line URL into the address field of your browser, you must cut and paste each line separately to get the entire URL without a break.

---

---

Note All documentation, including this document and any or all of the parts of the CiscoWorks NCM documentation set, might be upgraded over time. Therefore, we recommend you access the CiscoWorks NCM documentation set using the Cisco.com URL: http://www.cisco.com/en/US/products/ps6923/tsd_products_support_series_home.html

---

The Docs tab visible from within Network Compliance Manager might not include links to the latest documents.

Obtaining Documentation, Obtaining Support, and Security Guidelines

For information on obtaining documentation, obtaining support, providing documentation feedback, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

---

CCDE, CCSI, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco Nurse Connect, Cisco Stackpower, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0903R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

© 2009 Cisco Systems, Inc. All rights reserved.